Privacy Policy
Last updated 19 October 2026.
This is a plain-English draft and has not been reviewed by a lawyer. Have it checked before taking money from customers.
Who we are
TagVault is operated by Royal Nation LLC, Perth, Western Australia. We can be reached at admin@tagvault.com.au.
Whose data is in TagVault
Two different groups, and the distinction matters:
- Operators — the test & tag businesses who subscribe. We hold their account details, business name, ABN, technician names and billing records.
- Operators' clients — the businesses whose equipment is tested. We hold their site addresses, asset records, test results and a billing contact. We hold this on behalf of the operator, not for our own purposes.
What we collect
- Account and sign-in details, handled by our authentication provider.
- Asset registers, test results, photographs attached to tests, and the location recorded at the time of a test.
- Client names and contact details entered by the operator.
- Billing records, handled by our payment providers. We never see or store card numbers.
- Basic diagnostic logs.
- In the mobile apps: a few usage events (when the app is first opened, when a test result is recorded and whether it passed or failed, and when the plans screen is viewed) and crash reports (what went wrong, plus the phone model, operating system version and app version). These are tied to an identifier for the installed app, not to your name, email or any client or tag details. The approximate country they come from is worked out from the IP address.
- If you choose to turn on notifications: a token that lets us send them to your phone, and basic device details (model, operating system, language and time zone). Nothing is collected for notifications unless you opt in.
What we do not do
- We do not sell data to anyone, ever.
- We do not use operator or client data to train machine-learning models.
- We do not contact an operator's clients on our own initiative. Reminders are sent in the operator's name and only after that operator has approved the specific message.
- We do not advertise to anyone in the product.
- We do not track you across other companies' apps or websites, and the apps do not use or collect your advertising identifier.
Where it lives
Application data is stored with our hosting and database providers, which may process data outside Australia. Payment data is handled by our payment providers under their own terms.
Service providers
These companies process data on our behalf, only to run TagVault:
- Convex — the database and backend that store operator and client records.
- Clerk — sign-in and accounts. Like any sign-in service, it records the IP address and device details of each session to keep accounts secure.
- Resend — delivers the retest reminders an operator has approved.
- Stripe — takes subscription payments. We never see card numbers.
- RevenueCat — manages in-app subscriptions bought through the App Store or Google Play, so we know which plan an account has.
- Google (Firebase) — receives the usage events and crash reports from the mobile apps described above, so we can see whether the app works and fix crashes.
- OneSignal — delivers notifications to the phones of people who have turned them on. It receives nothing before you opt in.
- Netlify — hosts this website, the web console and the client portal.
- Google — on Android, the barcode scanner is provided by Google Play services, which sends Google basic diagnostics and device information about the scanner's performance. It does not send the tags you scan.
Getting your data out
Every record can be exported as CSV at any time, from inside the product, including while a subscription is lapsed or cancelled. This is deliberate: the records are the operator's, and we will not hold them hostage.
Deletion
Anyone with a TagVault account can request its deletion, from the app (Status → Delete account) or from the web console (Settings → Delete account), without needing to contact us. How deletion works.
We complete deletion within 30 days, except where we must keep billing records for tax purposes. Copies in our daily backups are removed within a further 30 days, as those backups expire. Note that test records may be evidence an operator or their client needs to keep — consider exporting before deleting.
Access and correction
Under the Australian Privacy Act you may ask what personal information we hold about you and ask us to correct it. Email us and we will respond within a reasonable time.
Security
Access to an operator's data requires authentication and is scoped to their organisation. Client portal links are unguessable, individually revocable, and stored only as a hash. No system is perfectly secure; if we become aware of a breach affecting your data we will tell you.
Changes
If we change this policy materially we will email account holders rather than quietly updating this page.